Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentication. Attackers can directly access generated backup files in the companies/weberp/ directory by requesting the Backup_[timestamp].sql.gz file.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2020-37082 webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentication. Attackers c… https://www.cve.org/CVERecord?id=CVE-2020-37082
Post summary
CVE-2020-37082 is an unauthenticated file‑access vulnerability in webERP 4.15.1 that permits remote attackers to download database backup files, with no mention of exploitation, PoC, or patch.
[CVE-2020-37082: CRITICAL] Critical vulnerability in webERP 4.15.1 allows attackers to download database backups without authentication. Access Backup_[timestamp].sql.gz files in companies/weberp/ directory ...#cve,CVE-2020-37082,#cybersecurity https://cvefind.com/CVE-2020-37082
Post summary
The tweet announces a critical webERP vulnerability that permits unauthenticated download of database backups, with no mention of PoC, exploits, patches, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | weberp | weberp | 4.15.1 | - | - |